user auth and bootstrap